CVE-2022-4743 — Simple Directmedia Layer vulnerability

Vendor	Product	Version range	Fixed in
debian	libsdl2	< libsdl2 2.26.0+dfsg-1 (bookworm)	libsdl2 2.26.0+dfsg-1 (bookworm)
libsdl	simple_directmedia_layer	>= 2.0.4 < 2.26.0	2.26.0
redhat	enterprise_linux	—	—

OSV

CVE-2022-4743: A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles

osv·2023-01-12·CVSS 7.5

CVE-2022-4743 [HIGH] CVE-2022-4743: A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

GHSA

GHSA-94g7-4r7x-4rfv: A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles

ghsa_unreviewed·2023-01-12

CVE-2022-4743 [HIGH] CWE-401 GHSA-94g7-4r7x-4rfv: A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.

CISA ICS

Siemens SCALANCE XCM-/XRM-300

cisa_ics·2024-02-15

Siemens SCALANCE XCM-/XRM-300 ICS Advisory ## Siemens SCALANCE XCM-/XRM-300 Release DateFebruary 15, 2024 Alert CodeICSA-24-046-11 As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF ## 1. EXECUTIVE SUMMARY - CVSS v3 9.8 - ATTENTION: Exploitable remotely/low attack complexity - Vendor: Siemens - Equipment: SCALANCE XCM-/XRM-300 - Vulnerabilities: Out-of-bounds Write, Incorrect Type Conversion or Cast, Improper Verification of Cryptographic Signature, Improper Access Control, Improper Authentication, Missing Encryption

Microsoft

A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability

vendor_msrc·2023-01-10·CVSS 7.5

CVE-2022-4743 [HIGH] CWE-401 A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability? One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact

Red Hat

SDL2: memory leak in GLES_CreateTexture() in render/opengles/SDL_render_gles.c

vendor_redhat·2022-09-21·CVSS 7.5

CVE-2022-4743 [HIGH] CWE-401 SDL2: memory leak in GLES_CreateTexture() in render/opengles/SDL_render_gles.c SDL2: memory leak in GLES_CreateTexture() in render/opengles/SDL_render_gles.c A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected. A potential memory leak issue was found in SDL2 in the GLES_CreateTexture() function in the SDL_render_gles.c file. This flaw allows an attacker to cause a denial of service attack. Package: SDL (Red Hat Enterprise Linux 6) - Not affected Package: SDL (Red Hat Enterprise Linux 7) - Not affected Package: gimp:flatpak/SDL (Red Hat Enterprise Linux 8) - Not affected Package: SDL (Red Hat Enterprise Linux 8) - Not affected Package: SDL2 (Red Hat Enterprise

Debian

CVE-2022-4743: libsdl2 - A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() fun...

vendor_debian·2022·CVSS 7.5

CVE-2022-4743 [HIGH] CVE-2022-4743: libsdl2 - A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() fun... A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected. Scope: local bookworm: resolved (fixed in 2.26.0+dfsg-1) bullseye: resolved (fixed in 2.0.14+dfsg2-3+deb11u2) forky: resolved (fixed in 2.26.0+dfsg-1) sid: resolved (fixed in 2.26.0+dfsg-1) trixie: resolved (fixed in 2.26.0+dfsg-1)

CVE-2022-4743: A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a…

Affected

CVSS provenance